MAL-2025-143803 Malicious code in janus-configstore-quark-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b29671555e93fdc9ad7382438d2ddb9778094ea0647da33556c9a852b3c137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142530 Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147098 Malicious code in redis-eleventy-eslint-plugin-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64593aa2f22548ad3c6bc1af3028c102ec42659a9ca45334c21087472cc2150b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149558 Malicious code in wolf-pm2-nightmare-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8439e7b0224db89fa9f40bffec37ff29001a3cf946650a27e3eb804f62c15ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147965 Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146459 Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670eb51790e74da0f18c792f45784b13105db35ced17fa5567b4d0730ee2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148724 Malicious code in toml-uninstall-acamar-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3712e1a9327cc0b6123842ab0d3fd495b50d3e0e9e098c7eeaf5593e748799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144135 Malicious code in kastra-version-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3ad7629526512c8e8094dc1e6a642a0a45b7f8f0b9d35bcec3a523d57cc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141531 Malicious code in delphinus-transform-event-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0752736ff183a84118d0c03070f6e93fb04f2b02c74e99d9c655488c1f9a590e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143502 Malicious code in hyperion-wezen-gatsby-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a5dacd1d551aa631da21bee30bcfa94538b09ab68a48ce915dbd65fad3a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146852 Malicious code in puppeteer-equinox-polaris-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f13932f9a8e3539f087bc416ba6f2dba7f3d6ed4e3551db43cf729c76f2caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144943 Malicious code in meteor-xml-equinox-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83078b1301d20295a327893bd0655755d15c5a6e7d68e8152651023943e274d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143382 Malicious code in hugo-chariklo-oauth-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd7d1fd0275b32a4d80f5e3b726a6742963052cd0743ae6a7dc530322ef608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143150 Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149844 Malicious code in yonder-slides-hermes-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e63cecb4f67a5cae4d7754df39a7799fd4bef7fcc25844e5a7c576e1e31ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148133 Malicious code in spectron-webdriver-init-wasat-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8431aae3cf4bfc929aa82d1fa1c88264a12e7a751e455259a574cc0e9a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...